This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
References:MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTM0Z2gtM2N3di13dnAy
Directory traversal in rollup-plugin-server
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
npm:rollup-plugin-server
PURL:
pkg:npm/rollup-plugin-server
|
<= 0.7.0 | No known fixed version | |
Affected Version RangesAll affected versions0.6.0, 0.7.0 |
|||